Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Das ist in der aktuellen Version leider nicht mehr möglich.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542879916

Proof data

Record hash (SHA-256)

6afc0ef9888fb13a0602c442e27f66287f8ca627ba5ba7ff16124b286e1cd3c6

Signature (Ed25519, base64)

fPr3jNCsO6kJYaPh21fqubymr6EbPG8PIaBBQgiOggmMKHfajQWcu7DFh33wq4ET0BLQ0DYcjLat96KatWzKDQ==

Merkle root

681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c

Merkle path

["6afdbc8609c6cd79a3f7d942f25478489cd0ef9e7e492bb4e936456737ceb171","fc49373acb620ce2e8e7291262f5cb504af4d30c6b3c630fedd77e8ce24da2ac","770405e0f81d4c22e3b4adbebd5d07517780a87dc78b7b958289e002d62870c2","4c0a18610a6e121b7e2d0426bacc1c59584551b8075af2d49eb689a1fd397f2d","1199e147a35891222b8a61e0c0691bb5d55ad2e70053dbfe6274e051e5881928","c74b8c960b4263c5e15963ec3af9259db4d4369359a41dac73ecbe0bd5edf7aa","bb5a48d75dc6f4e19221569a6b9e644abaf01dd27e4eaaafd1ffffb726ed4691","0c917b31eb564fe94199cdf2d2517262cd1330b70521c29cbf3ba4c60486b8ec","834178eb8a7ca3eef14e95b92b0764e8aad1d404053bb2b3333af6a28d4a549c","d109f1cf25a14f43222b5598e40b60bec79fa55be73eb4e4fb7ce6660614e327","032be7307d5db4b79cb5329f9b3de2ef3a6e3543bd6b235f36cca22303365eae","f44be1811ff0bb195f5fdef3c493187d1dd9ac5bcbedba4371f021a93bcc8365","b8686ad1f3c76af9372c49f04594bb5fe4d826cc036a375eba0c663f521c54c8","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…

Expected log hash

8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"theme:threema/returns/de","quote":"Das ist in der aktuellen Version leider nicht mehr möglich.","rating":4,"review_date":"2026-04-07","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.